Overview

overview

10

Static

static

Profit and...sx.lnk

windows7_x64

8

Profit and...sx.lnk

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Profit and Loss Statement.zip

  • Size

    1KB

  • Sample

    211104-ndvmaadehq

  • MD5

    4b9eb054d9f7f5dd8c23cc1d7312013c

  • SHA1

    4c06e622d99e51699f7a7f51904302eb60c15759

  • SHA256

    394af5b8c1c0bcdc6a4b974f0972cc6d57edafe000dc41030fe47efd9772734e

  • SHA512

    0588dfc992f169634b7aa128d1786528ab64366c66c2a623ca1164d493e78ef30acfef7e96ced2065c6a15b64e5dd9fcb4a0226b008dd4f978313acf63a1ba01

Score
10/10
googlephishing

Malware Config

Targets

    • Target

      Profit and Loss Statement.xlsx.lnk

    • Size

      2KB

    • MD5

      8b9fee7600633e4017337d5b56613a59

    • SHA1

      cab6dcec5bd77f8e59b1caa330ad58f0f8280f39

    • SHA256

      0b8d7a851920d4584777505f9fb484b226a8457d4049885a87c847f7d3532d28

    • SHA512

      8b520bc99fcc74ba1424dd283106633b35d353b75a42c89963feac2ceebf9bafd9081be1f5dc3f1ebeeb9b8d5dc79d81d596089c06178d4b1295edd4ac3ed55a

    Score
    10/10
    googlephishing

    • Detected google phishing page

      phishinggoogle

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks